GitHub · GH-500
Custom detection, governance, and shift left
GH-500 · Lesson 14 of 16 · 1:52:34
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-500 exam (GitHub Advanced Security). In this lesson: CodeQL query suites, query packs, and model packs, tailoring detection to risk profiles with custom properties and threat models, roles, delegated exceptions, and alert ownership, collaboration across teams, and cross-suite enforcement that shifts security checks into the pull request. Includes three original practice questions.
Preview the topics
- CodeQL stops following user input when it enters Contoso’s in-house Java framework, so injection paths through it are missed. What should the team add?
- Contoso wants its release engineers to review and approve bypass requests for push protection, without making them owners or security managers. What should it use?
- Contoso wants one control that stops pull requests into main across all payments repositories if they add a vulnerable dependency, introduce a high CodeQL alert, or contain an unresolved secret. What should it create?